diff --git a/main.tf b/main.tf
index 8d8e9ce..a61800e 100644
--- a/main.tf
+++ b/main.tf
@@ -45,8 +45,8 @@ module "k8s" {
     location = "fsn1"
     count    = 1
   }]
-  kubernetes_exposed_ips = values(data.external.my_ip.result)
-  ssh_exposed_ips        = values(data.external.my_ip.result)
+  kubernetes_exposed_ips = var.expose_kubernetes_and_ssh_ports ? values(data.external.my_ip.result) : []
+  ssh_exposed_ips        = var.expose_kubernetes_and_ssh_ports ? values(data.external.my_ip.result) : []
   public_tcp_services = {
     http = ["80", "443"]
   }
diff --git a/variables.tf b/variables.tf
index d3a8cb7..bc8161b 100644
--- a/variables.tf
+++ b/variables.tf
@@ -1,3 +1,8 @@
+variable "expose_kubernetes_and_ssh_ports" {
+  type    = bool
+  default = false
+}
+
 variable "hetzner_dns_apitoken" {
   type = string
 }